The vulnerability identified as CVE-2026-87748 in Qorela DC is classified as CWE-862 (Missing Authorization). It allows an attacker with existing privileges to abuse those privileges due to insufficient authorization checks in the affected versions (>=1.6.1-RC29 <1.6.2). The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could lead to privilege abuse, potentially allowing an attacker to perform unauthorized actions that compromise the confidentiality, integrity, and availability of the affected system. The high CVSS score reflects the critical nature of the impact.

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to trusted users and monitor for suspicious activity related to privilege abuse.